A US$1 billion lawsuit filed Thursday promises to open up a new front in the battle against spam: It targets not just spammers, but -- for the first time -- also those responsible for harvesting e-mail addresses on behalf of spammers.
The lawsuit, filed in the U.S. District Court in Alexandria, Virginia., is one of the largest of its kind and is being filed on behalf of Project Honey Pot members in over 100 countries. Project Honey Pot is a service provided by Park City-Utah based antispam company Unspam Technologies.
"If you've harvested e-mail addresses or sent spam in the last two years, chances are you're on our radar screen and we're coming after you," a note posted on the Project Honey Pot Web site said Thursday.
"This lawsuit is unique because we believe it is the first major case in the United States to bring a claim against spammers for harvesting e-mail addresses," the note said. "While this practice has been a penalty enhancement under the CAN-SPAM Act since it was passed, in most cases the data was not available in order to prove an address was harvested."
The case is being handled by Jon Praed, a founding partner of the Washington D.C-based Internet Law Group, which has represented and won antispam lawsuits for clients such as Verizon Online and AOL in the past.
Project Honey Pot bills itself as a system for identifying spammers and the so-called spambots used by e-mail harvesters to scrape addresses from Web sites. Web site owners can install honey pot software on their sites that allows them to identify spam, as well as when the e-mail was sent to was harvested by the spammer -- and the IP address of the harvester.
The defendants in the case are the "John Does" responsible for e-mail harvesting and spamming, Praed said. "Spammers are very good at hiding themselves. But what they can't hide are the data points that they use [for spamming]. We have got a lot of those data points."
Among the terabytes of data Project Honey Point has collected are more than 6 million spam e-mails, 2.5 million IP addresses from which spam was sent and about 15,000 IP addresses belonging to e-mail harvesters.
The data will allow the plaintiffs to ask the court to subpoena ISPs for the identities of the owners of some of these IP addresses, Praed said. "We are going after the largest targets. The discovery will focus on the big fish. Some of these guys have made a big mistake. They have failed to use anonymity. If you are going to commit an Internet crime everything has to be anonymous."
Often in antispam litigation the biggest stumbling block is establishing the identity of the spammer, Praed said. "What they are engaged in is such inappropriate behavior they usually can't defend themselves to anyone," once they are identified.
Unlike many other antispam initiatives, Project Honey Pot does a good job of gathering evidence against e-mail harvesters that will probably stand up in a court of law, said John Levine chairman of the Internet Anti-Spam Research group. "They have an enormous database where they have evidence of those who collected e-mail addresses for spamming. Although spam comes from different places, in reality there are only a few who harvest addresses for spammers."
Going after such harvesters is a good tactic, he said. "The more expensive and risky we can make it for them the less spam" there will be.
The fact that Praed is representing the case is also a good sign, Levine said. "This looks like a good case. He wouldn't take this if he didn't think he could win."
The lawsuit is part of a week-long series of announcements from Project Honey Pot. On Monday, it announced new honey pot software called QuickLinks designed to help bloggers using services such as Typepad and Blogger -- as well as anyone owning hosted Web sites -- to track e-mail harvesters and spambots. On Tuesday, it announced a new service for tracking "comment spammers" who leave comments containing links to Web sites on blog postings and wikis.
On Monday, Project Honey Pot announced a new service that will allow those using its service to create black lists to automatically block comment spammers and harvesters from accessing their site.
- +
Ticked Off at Tick the Box Mentality 04/02/2008 13:01:15
Does your executive search firm know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?Does your executive search firm know its MIS managers from its elbow? Does it even know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients? - +
Strategies for Dealing With IT Complexity 24/12/2007 10:30:47
Every innovation, every business process improvement, comes with an IT complexity tax that must be paid by CIOs in time, money and sweat. Here are strategies to mitigate the increasing complexity of IT as it enables new business.Every innovation, every business process improvement, comes with an IT complexity tax that must be paid by CIOs in time, money and sweat. Here are strategies to mitigate the increasing complexity of IT as it enables new business. - +
9 Paths to Higher Performance 10/12/2007 14:09:23
When an organization brings together talented people in a creative, collaborative environment it fosters a culture of high performance, which in turn leads to superior business resultsLike high-achieving individuals, some organizations seem to have the Midas touch. Virtually every initiative they touch earns them gold and even those that fail never seem to cost them much of anything at all
Read up on the latest ideas and technologies from companies that sell hardware, software and services. Everything you need to know about email and web security (but were afraid to ask)
Know thy self: Reduce costs, secure data and ensure compliance with identity management
Delivering the Power of Choice with Microsoft Dynamics CRM
Security Inside Out
Agile in the Enterprise
Discover the advantages of an open architecture multi-vendor network solution
Solve Exchange Mailbox Storage Issues Once and for All
Strategies for Eliminating .PST Files
Zones provide focussed content from Computerworld and leading technology partners.Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
Computerworld Live Podcast #97: The Future of Enterprise Networking 25/07/2008 09:45:36
This week CW Live chats with Mark Thompson, global sales and marketing manager for HP ProCurve, on the future of the enterprise networking. Mark discusses the trends we can expect to see in the near future and how the right infrastructure can ensure your enterprise network is secure. - +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future.
Vignette Announces 2008 Excellence Awards 2008-11-21 10:50:00+11
PGP and Ponemon Institute Unveil Inaugural Australian Data Breach Study 2008 2008-11-20 17:34:00+11
Symantec Cloud Services Transform Data Centre Operations Through Proactive Management 2008-11-20 12:06:00+11
Verizon Business Offers Tips to Building a Successful Unified Communications and Collaboration Plan 2008-11-20 12:04:00+11
AARNet Brings 4K Digital Cinema to Australia: First 4K HD Video Signal delivered into Australia by AARNet 2008-11-20 12:02:00+11
Know thy self: Reduce costs, secure data and ensure compliance with identity management
Midsize businesses cannot operate effectively without the ability to control access to their networks and business systems. A strong identity management platform can play the role of gatekeeper and guardian of business intelligence and information. Read on to discover how you can create a strong identity management plan to protect your business.









